IT Audit Services

Independent and objective review of your IT infrastructure

Experienced, Independent IT Auditors

Our IT audit services provide an independent and objective review of an organization’s IT infrastructure, control configuration, and regulatory compliance through in-depth testing and expert analysis. As part of our IT audit services, our team collects and evaluates evidence of your organization’s technical controls, policies and procedures, and other related documentation to ensure the availability, confidentiality, and integrity of mission-critical systems and data. Our team works directly with yours to ensure efficiency throughout the audit process.

GraVoc’s auditors maintain several professional certifications, including Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), and Certified Information Systems Security Professional (CISSP). Our IT audit service area expands throughout Massachusetts, Southern New Hampshire, and New England but are not limited to these states.

Benefits of IT Audit Services Include:

R

Identify and remediate control gaps

R

Evaluate and enhance security controls to properly protect sensitive IT and information assets

R

Ensure compliance with data security, privacy, and cybersecurity regulations

R

Improve your organization’s overall security posture

Our Process

1.) Discovery Phase

Perform an in-depth review of the physical, administrative, and technical controls applied across an organization’s IT operation.

2.) Analysis Phase

Evaluate the information gathered to identify potential control gaps and risk exposure.

3.) Reporting Phase

Deliver a detailed report that provides an explanation of the control gaps identified and associated risks along with recommendations for improvement.

GraVoc’s IT Audit Control Domains

While the IT audit scope is constantly expanding and depends primarily on the nature and complexity of the client’s operation, GraVoc’s IT audit process analyzes five fundamental control domains. These include:

Management & Oversight

Our team will review your overall IT organization, including IT management practices, defined authority and responsibility among personnel, strategic planning, and audit resolution tracking, to determine the adequacy of existing controls.

Network Security & General Systems Controls

For this domain analysis, our team will review access controls and security configurations on your local and wide area network. Our team will also evaluate controls relevant to IT governance and the physical security of IT equipment.

Policies & Procedures

To evaluate the reliability and efficiency of controls under this domain, our team will assess the policies and procedures pertaining to the use and management of your IT infrastructure, including your disaster recovery/business continuity plan, incident response, and information security program.

Application Controls

Our team will verify the adequacy of controls within your organization’s mission-critical business applications and service delivery channels.

Third-Party Technology Service Providers

Here, our team will review your vendor relationship management practices for third-party technology service providers and assess current controls to manage risks associated with these partnerships.

Our certifications include…

 

CCNA Security

Cisco Certified Network Associate Security

CISM

Certified Information Security Manager

CISA

Certified Information Systems Auditor

CRISC

Certified in Risk and Information Systems Control

C|EH

Certified Ethical Hacker

CISSP

Certified Information Systems Security Professional

E|CIH

EC-Council Certified Incident Handler

MCP

Microsoft Certified Professional

By the Numbers

 

98%

Customer Retention 

500+

Clients

20+

Professional Security Certifications

1

Common Goal: YOUR SUCCESS!

GET IN TOUCH

Have a question or want to discuss our IT Audit services? Contact a GraVoc employee below by filling out the form!

Additional IT Audit Services:

Security Configuration Review

Compliance Gap Analysis

Information Security News

 

Information Technology Audit Service Area

GraVoc is located in Peabody Massachusetts, just north of Boston, and provides Information Security services including IT Audit, IT General Controls Audit and Compliance Gap Analysis to businesses and organzations in the New England area. GraVoc’s Information Security Auditors hold certifications in CCNA Security, CISM, CISA, CRISC, C|EH, CISSP, and E|CIH. Below is a list of our Massachusetts and New Hampshire IT Audit service area. GraVoc also provides IT Audit services in Connecticut, Maine, Rhode Island and Vermont but are not limited to these states.

Massachusetts IT Audit service area:

Acton, Amesbury, Andover, Arlington, Ashby, Ashland, Ayer, Bedford, Belmont, Beverly, Billerica, Boston, Boxborough, Boxford, Burlington, Cambridge, Carlisle, Chelmsford, Chelsea, Concord, Danvers, Dracut, Dunstable, East Boston, Essex, Everett, Framingham, Georgetown, Gloucester, Groton, Groveland, Hamilton, Haverhill, Holliston, Hopkinton, Hudson, Ipswich, Lawrence, Lexington, Lincoln, Littleton, Lowell, Lynn, Lynnfield, Malden, Manchester by the sea, Marblehead, Marlborough, Maynard, Medford, Melrose, Merrimac, Methuen, Middleton, Nahant, Natick, Newbury, Newburyport, Newton, North Andover, North Reading, Peabody, Pepperell, Reading, Revere, Rockport, Rowley, Salem, Salisbury, Saugus, Sherborn, Shirley, Somerville, Stoneham, Stow, South Boston, Sudbury, Swampscott, Tewksbury, Topsfield, Townsend, Tyngsborough, Wakefield, Waltham, Watertown, Wayland, Wenham, West Newbury, Westford, Weston, Wilmington, Winchester, Winthrop and Woburn.

Our Massachusetts IT Audit service area also includes: Barnstable County, Berkshire County, Bristol County, Dukes County, Franklin County, Hamden County, Hampshire County, Nantucket County, Norfolk County, Plymouth County and Worcester County.

New Hampshire IT Audit service area: 

Amherst, Andover, Atkinson, Auburn, Boscawen, Bow, Bradford, Brentwood, Candia, Canterbury, Chester, Concord, Danbury, Danville, Deerfield, Derry, Dunbarton, East Kingston, Epping, Epsom, Exeter, Franklin, Fremont, Greenland, Hampstead, Hampton Falls, Hampton, Henniker, Hill, Hooksett, Hopkinton, Kensington, Kingston, Loudon, Lyndeborough, New Castle, New London, Newbury, Newfields, Newington, Newmarket, Newton, Northfield, North Hampton, Northwood, Nottingham, Pembroke, Pittsfield, Plaistow, Portsmouth, Raymond, Rye, Salem, Salisbury, Sandown, Seabrook, South Hampton, Stratham, Sutton, Warner, Webster, Wilmot and Windham.

Our New Hampshire IT Audit service area also includes: Hillsborough CountyRockingham County and Cheshire County.

Pin It on Pinterest